Local privilege escalation

Local and kernel denial-of-service

Local denial-of-service

Android ZCC VPN API method privilege escalation

ZCC race condition in ZPA tunnel handler

Anti-Tampering bypass via Repair App functionality

Incorrect signature validation of package

Local Privilege Escalation on Zscaler Client Connector on Windows

Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control

Repair App local code execution with arbitrary privileges

Anti-tampering can be disabled with uninstall password enforced

ZScalerService Local Privilege Escalation

Lack of input santization on Zscaler Client Connector enables arbitrary code execution

Revert password check incorrect type validation

IPC Bypass Through PLT Section in ELF

Client IPC validation bypass

Heap Based Buffer Overflow in Library

Privilege Escalation for ZCC macOS via PATH Variable

ZApp Installer Privilege Escalation Vulnerabilities

Untrusted Search Path While Executing REG DELETE by Uninstaller

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited…

DHCP routing options can manipulate interface-based VPN traffic

Android ZCC denial of service

Signature validation issue leads to Anti-Tampering bypass

ZCC Mac validinstaller file integrity check missing

MacOS Zscaler Client Connector Local Privilege Escalation

LPE using arbitrary file delete with Symlinks

ZSATrayManager Arbitrary File Deletion